typescript-expert

Pass

Audited by Gen Agent Trust Hub on Jun 17, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses shell commands for project environment detection, including npx tsc --version, node -v, and a node -e one-liner to parse package.json dependencies. These are standard operations for identifying the development ecosystem.
  • [COMMAND_EXECUTION]: The diagnostic script scripts/ts_diagnostic.py utilizes subprocess.run with shell=True to execute diagnostic tools such as grep and tsc. This implementation is used to facilitate command piping and output redirection (e.g., grep ... | wc -l), which is appropriate for a local diagnostic utility.
  • [COMMAND_EXECUTION]: Validation steps in SKILL.md include running npm run typecheck, npx tsc --noEmit, and npx vitest, which are routine verification tasks in TypeScript development workflows.
  • [DATA_EXPOSURE]: The skill reads local project configuration files (tsconfig.json, package.json) and source code files (via grep) to provide context-aware expert advice and diagnostic reports.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 17, 2026, 07:54 AM
Security Audit — agent-trust-hub — typescript-expert